MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0b251f6e6a419fc7d573ea157c2500f47db70b8649a989a764606c778b1ad53f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0b251f6e6a419fc7d573ea157c2500f47db70b8649a989a764606c778b1ad53f
SHA3-384 hash: 23f82105ce23473786838a9266756d962433cc00b6ecaa40d619829cebf1c09cf338d7e6e8f37acf4ab21364d7d826c7
SHA1 hash: 5929a6e643f30ff1615cd012634acdf4592aa7e9
MD5 hash: d2bef8e6b0afd67a855b9b5aff900a87
humanhash: connecticut-white-michigan-indigo
File name:PO_23352816.pdf.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:409'551 bytes
First seen:2020-06-23 06:39:36 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:Uz+Nh1qNK7Y+HiuZYhg1V2yK7QMKIEmz7D6AYCOPI7tTn51LqJEfBCUMo+vPSimM:Uz+HgK7n3og2ykKIEOY7GoUmPSiIEj
TLSH 159423B3493345C6745250CBBDE06E982CCF15A8357A9238A14FDF6DC084E987D8DAAF
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0b251f6e6a419fc7d573ea157c2500f47db70b8649a989a764606c778b1ad53f/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-22 18:37:00 UTC
AV detection:
24 of 31 (77.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=bmsr63tkigp4pvlt5ikxyjia6r63oc4gjguytj3embwhpcy22u7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 0b251f6e6a419fc7d573ea157c2500f47db70b8649a989a764606c778b1ad53f

(this sample)

AgentTesla

Executable exe c87d0af1b7d984327de7a8e4a46c3d8b2cbfe2c6e74d3c31e158b7d92e42226e

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c87d0af1b7d984327de7a8e4a46c3d8b2cbfe2c6e74d3c31e158b7d92e42226e
  
Dropping
MD5 a33dbdecdb343c3ac0c84e514f13d113

Comments